Stuxnet hits India the most

It’s being described as the new cyber WMD and may have crippled an Iranian nuclear plant, but one cybersecurity company has estimated that the worm, Stuxnet, may have its largest footprint in India.
HT Image
HT Image
Updated on Oct 04, 2010 11:54 PM IST
Copy Link
Hindustan Times | By, New York

It’s being described as the new cyber WMD and may have crippled an Iranian nuclear plant, but one cybersecurity company has estimated that the worm, Stuxnet, may have its largest footprint in India.

Another expert has put forward a conjecture that the failure of the INSAT 4B satellite this summer may have been due to this cyber superweapon.

According to data posted by Alexander Gostev, Chief Security Expert at Kaspersky Lab, India has topped the list of the most infected countries.

While clarifying that the data had been collected from Kaspersky’s personal product line, the numbers are still worrisome. Since Stuxnet was first detected in July, the number of infections in India in the first five days was at over 8,500 with just over 5000 in Indonesia and a little over 3000 in Iran, the top three countries.

The latest data set, between September 20 and 25, makes it clear that the problem is still raging in India, which again heads the list with over 8,000 infections, trailed by Indonesia with about 3000 and Kazakhstan with approximately 1300. The numbers of Iran dipped to 765.

Gostev noted in the analysis: “Iran managed to significantly cut its infection rate by cleaning many infected systems. If this trend is maintained, then Iran will stop being one of the centres of the epidemic. India, on the other hand, has stayed more or less at the same level; it is encouraging, though, the epidemic doesn’t seem to be on the rise.”

Iran has been projected as the epicenter of the Stuxnet epidemic. Iran’s nuclear infrastructure near Bushehr had been beset by problems caused by the worm which the Iranian regime has claimed was part of cyberwarfare being conducted possibly by Israel and the United States.

Meanwhile, the threat posed by Stuxnet to India has been alluded to by Jeffrey Carr, author of Inside Cyber Warfare, who has drawn a link between the failure of INSAT 4B and Stuxnet.

In Forbes’ The Firewall blog, Carr that the satellite was operated by the Indian Space Research Organisation or ISRO which “is a Siemens customer.

According to the resumes of two former engineers who worked at the ISRO’s Liquid Propulsion Systems Centre, the Siemens software in use is Siemens S7-400 PLC and SIMATIC WinCC, both of which will activate the Stuxnet worm.”

Siemens control systems, like those used in Iran, have been reported as the most vulnerable to this particular worm.

While data may vary according to the company undertaking the assessment, other reports have also made it clear that India is within the top three in terms of infections, along with Iran and Indonesia.

A report in September from Symantec pointed out that while 58 per cent of infections were in Iran, about 18 per cent was in Indonesia and nearly 10 per cent in India.


    Anirudh Bhattacharya is a Toronto-based commentator on North American issues, and an author. He has also worked as a journalist in New Delhi and New York spanning print, television and digital media. He tweets as @anirudhb.

Close Story

Less time to read?

Try Quickreads

  • Bangladesh foreign minister AK Abdul Momen during the inaugural session of NADI 2022 (Natural Allies in Development and Interdependence) "Asian Confluence River Conclave 2022", at Radisson Blu, in Guwahati on Saturday, May 28, 2022. (ANI)

    Refugees from Myanmar may turn to extremism: Bangladesh foreign minister

    Myanmar nationals staying in Bangladesh as refugees could turn to extremism, Bangladesh foreign minister AK Abdul Momen said on Saturday, as he sought help from India and other countries in the region to repatriate them. External affairs minister S Jaishankar, Assam chief minister Himanta Biswa Sarma and ambassadors and high commissioners of several southeast Asian countries, including Myanmar, attended the session.

  • Representative Image

    Porn clips played on display screens at airport in Brazil's Rio de Janeiro

    Passengers at an airport in Brazil's second-largest city of Rio de Janeiro were in for a shock when electronic displays at the facility began showing pornographic scenes--instead of advertisements and flight information--in an apparent case of hacking. Santos Dumont is the second airport in Rio de Janeiro, after the main Gaelao International Airport. Named after Brazilian aviation pioneer, Alberto Santos Dumont, it is both a public and military facility.

  • Representational image.

    At least 31 die in church stampede in southern Nigeria

    At least 31 people died in Nigeria on Saturday during a stampede at a church in the southern Rivers state, a police spokesperson said. Hundreds of people who had turned up to receive food at the church early on Saturday broke through a gate, causing the stampede, police spokesperson for Rivers state, Grace Iringe-Koko said.

  • Russian President Vladimir Putin attends a meeting in Moscow.

    Putin willing to discuss resuming Ukrainian grain shipments from Black Sea ports

    The Kremlin said Russian President Vladimir Putin told the leaders of France and Germany on Saturday that Moscow was willing to discuss ways to make it possible for Ukraine to resume shipments of grain from Black Sea ports. Putin spoke to French President Emmanuel Macron and German Chancellor Olaf Scholz over the phone.

  • A board at the Utopia School District. (AFP)

    After Uvalde tragedy, a Texas school says staff can carry guns on campus

    In the wake of Tuesday's shooting at an elementary school in Uvalde, Texas, in which 18-year-old Salvador Ramos killed 19 children and two teachers before being fatally shot by the police, the only school in the small town of Utopia, also in Texas, has said its teachers and staff can carry guns on campus to prevent an Uvalde-like tragedy.

Story Saved
Saved Articles
My Reads
Sign out
New Delhi 0C
Sunday, May 29, 2022